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Amendments to the Claims 



This listing of claims will replace all prior versions of claims in the application: 
Listing of Claims: 

1 . (Currently amended) A method for facilitating integrity of an assembly employable by 
application programs during runtime, comprising: 

providing an assembly with [[a]] an assembly manifest that contains a list of modules that 
make up the assembly; 

providing the assembly manifest with a hash of the contents of at least one module of the 
list of modules;-as4 

providing th e assembly tnaTHfqflt with a hash of a manifest of at least one other assembly 
that the assembly depends on: and 

comparing the hash retained in the assembly manifest with a hash of the at least one 
module obtained at runtime to identify whether a runtime version of the at least one module is 
substantially similar to a version utilized at build time of the assembly. 

2. (Currently amended) The method of claim 1 , providing the assembly manifest with [[a]] 
the_hash of the contents of at least one module of the list of modules comprises providing the 
assembly manifest with a hash of each module of the list of modules that constitutes the 
assembly. 

3. (Currently amended) The method of claim 1, further comprising providing identity 
information in the assembly manifes t of tho asnombly . 

4. (Original) The method of claim 3, die identity information comprising publisher 
information and version information. 

5. (Previously presented) The method of claim 1, further comprising providing a hash of the 
contents of the assembly at the end of the assembly. 
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6. 



(Currently amended) The method of claim 1, further comprising determining if the 



contents of the assembly have been modified by determining an actual hash of the contents of the 
at least one module of the list of modules and comparing the actual hash with the hash of the 
contents of the at least one module of the list of modules residing in the assembly manifesto-fee 
assembly. 

7. (Previously presented) The method of claim 6, further comprising determinmg if the 
publisher of the assembly is trustworthy if the assembly has been modified. 

8. (Currently amended) The method of claim 7, determining if the publisher of the assembly 
is trustworthy if the assembly has been modified oompriGing comprises checking version 
information and publisher name information residing in the assembly manifes t of tho assembly , 

9. (Cancelled). 

1 0. (Currently amended) A method for facilitating integrity of assemblies employable by 
application programs during runtime, comprising: 

providing an assembly with [[a]] an assembly manifest that contains a list of referenced 
assemblies that the assembly depends on; 

providing the assembly m anifest with a hash of a manifest of at least one referenced 
assembly of the list of referenced assemblies; and 

analyzing the hash provided to the assembly m anifest and a second hash of the manifest 
of the at least one referenced assembly computed at runtime to determine whether changes have 
been made to the at least one referenced assembly between runtime and at build time of the 
assembly. 

11. (Currently amended) The method of claim 10, providing the assembly m anifest with [[a]] 
the hash of the manifest of at least one referenced assembly of the list of referenced assemblies 
comprises providing the assembly m anifest with a hash of each referenced assembly of the list of 
referenced assemblies. 
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1 2 . (Currently amended) The method of claim 1 0, further comprising providing identity 
information in the assembly m anifes t of the as s embly . 

1 3 . (Original) The method of claim 1 2, the identity information comprising publisher 
information and version information, 

14. (Previously presented) The method of claim 10, further comprising providing a hash of 
the contents of the assembly at the end of the assembly. 

15. (Currently amended) The method of claim 10, further comprising determining if the 
contents of the at least one referenced assembly have been modified by determining an actual 
hash of the contents of the at least one referenced assembly of the list of referenced assemblies 
and comparing the actual hash with [[the]] ahash of the contents of the at least one referenced 
assembly of the list of referenced assemblies residing in the assembly m anifes t of th e assembly. 

1 6. (Previously, presented) The method of claim 1 5, further comprising determining if the 
publisher of the at least one referenced assembly is trustworthy if the at least one referenced 
assembly has been modified. 

17. (Currently amended) Hie method of claim 16, determining if the publisher of the at least 
one referenced assembly is trustworthy if the at least one referenced assembly has been modified 
comprises checking version information and publisher name information residing in [[a]] the 
manifest of the at least one referenced assembly- 
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18. (Currently amended) A computer readable medium having at least one computer 
executable component employable by an application program at runtime comprising: 

an assembly including [[a]] an assembly manifest that contains a list of at least one 
referenced assembly that the assembly references, a first hash of a manifest of the at least one 
referenced assembly, a list of modules that make up the assembly and a hash of the contents of at 
least one module of the list of modules, the hash of the contents of the at least one module i s 
utilized to control which versions of the modules are employed in connection with the assembly 
at runtime. 

19. (Cancelled) 

20. (Currently amended) The computer readable medium of claim 4918. the assembly 
manifest including identity information and version information. 



2 1 . (Currently amended) The computer readable medium of claim 1918, the assembly being 
a dynamically linked library. 

22. (Currently amended) A computer readable medium having at least one computer 
executable component employable by an application program at runtime comprising: 

an assembly including [[a]] an assembly manifest that contains a list of at least one 
referenced assembly that the assembly references and a hash of the contents of a manifest of the 
at least one referenced assembly, the hash is compared to a second hash produced at runtime to 
evaluate whether the at least one referenced assembly is a same version as the at least one 
referenced assembly utilized at build time of the assembly. 
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23. (Currently amended) A system for facilitating integrity of assemblies employable by 
application programs at runtime, the system comprising: 

a first component that provides [[a]] an assembly m anifest for an assembly, the assembly 9 
manifest having a list of modules making up the assembly and a list of at least one referenced 
assembly that the assembly references : and 

a second component that provides the assembly m anifest with a hash of at least one 
module of the list of module s and a hash of a manifest of the at least one referenced assembly , 
the hash of the at least one module is compared with a hash of the at least one module generated 
at runtime to identify changes in the content of the at least one module. 

r 

24. (Previously presented) The system of claim 23 , further comprising a third component 
adapted to compare the hash of said at least one module with an actual hash value of the at least 
one module. 



25 . (Currently amended) The system of claim 24, the assembly m anifest including identity 
and version information and the third component adapted to determine if the assembly should be 
executed based on a review of the originator and version information, if the hash of the at least 
one module in the assembly manifest and the actual hash value of the at least one module are 
different. 

26. (Original) The system of claim 23, further comprising a binding component adapted to 
provide binding policy information for deteimining a version of an assembly that an application 
program will run if another assembly having the same name resides on the system. 
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27. (Currently amended) A system for facilitating integrity of assemblies employable by 
application programs at runtime, the system comprising: 

a first component that provides [[a]] an assembly manifest for an assembly, the assembly 
manifest having at least one referenced assembly, the at least one referenced assembly 
comprising a manifest; 

a second component that provides the assembly m anifest with a hash of the manifest of 
the at least one referenced assembly; and 

a third component that compares the hash of the at least one referenced assembly in the 
assembly m anifest with an actual hash value of the at least one referenced assembly to identify 
version changes. 

28. (Cancelled) 

29. (Original) The system of claim 27, further comprising a binding component adapted to 
provide the third component with binding policy information. 

30. (Currently amended) A system for facilitating integrity of an assembly employable by 
application programs at runtime, the system comprising; 

means for relating [[a]] an assembly m anifest having a list of at least one related 

assembly to an assembly, the at least one related assembly comprising a manifest; 

means for providing the assembly m anifest with a hash of the manifest of the at least one 
related assembly; and 

means for evaluating integrity of the assembly by comparing the hash value with a 
second hash value computed at runtime. 



3 1 . (Original) The system of claim 30, the at least one related assembly being a module. 



32. (Original) The system of claim 30, the at least one related assembly being a referenced 
assembly. 
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33. (Currently amended) The system of claim 30, further comprising means for comparing a 
hash value of the at least one related assembly in the assembly m anifest to an actual hash value 
of the at least one related assembly. 

34. (Original) The system of claim 30, further comprising means for establishing a binding 
policy. 

35. (Original) The system of claim 30, at least one of the assembly and the at least one 
related assembly being a dynamically linked library. 
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